What's Changed

• Add OpenSSF Scorecard workflow by @gaborbernat in #3238
• Document AI-assisted contributions and licensing policy by @gaborbernat in #3239
• 👷 ci(release): attest and sign release provenance by @gaborbernat in #3242
• 👷 ci: harden Scorecard-scored checks in CI by @gaborbernat in #3241
• 🐛 fix(ci): parallelize graalpy tests, recover crashed workers by @gaborbernat in #3240
• 🐛 fix(ci): mark real-shell activation tests as slow by @gaborbernat in #3243
• 👷 ci: run macOS jobs on macos-26 by @gaborbernat in #3244
• 🐛 fix(activation): undo a live activation before activate.bat saves values by @darrenhuai in #3245
• 🐛 fix(create): keep pyvenv.cfg values on a single line by @gaborbernat in #3247
• 🔧 chore(test): add opt-in Atheris fuzz harness by @gaborbernat in #3246
• 📝 docs(readme): add OpenSSF Best Practices badge by @gaborbernat in #3248

Full Changelog: 21.7.10...21.7.11

What's Changed

• 🔧 chore: check spelling with typos in pre-commit by @even-even in #3235
• 🐛 fix(activation): keep and restore the user's TCL_LIBRARY and TK_LIBRARY by @darrenhuai in #3234
• 🐛 fix(create): skip blank and comment lines in pyvenv.cfg by @r3wretrhy in #3232
• 🐛 fix(activation): restore PKG_CONFIG_PATH that was not set before by @darrenhuai in #3233

New Contributors

• @r3wretrhy made their first contribution in #3232

Full Changelog: 21.7.9...21.7.10

What's Changed

• fix(test): EncodingWarning: 'encoding' argument not specified by @even-even in #3228
• 🐛 fix(config): ignore a config file that fails to parse instead of crashing by @darrenhuai in #3230
• 🐛 fix(util): replace a stale symlink instead of writing through it by @darrenhuai in #3229

Full Changelog: 21.7.8...21.7.9

What's Changed

• 🐛 fix(create): report a missing source that both modes need by @darrenhuai in #3227

Full Changelog: 21.7.7...21.7.8

What's Changed

• 📄 docs: document the interpreter names in an environment by @gaborbernat in #3225
• 🎨 refactor(create): read the system exe without narrowing by @gaborbernat in #3224

Full Changelog: 21.7.6...21.7.7

What's Changed

• 🐛 fix(create): name Windows venv exes after the interpreter by @darrenhuai in #3223

Full Changelog: 21.7.5...21.7.6

What's Changed

• 🐛 fix(types): adapt to python-discovery 1.5.2 annotations by @gaborbernat in #3211
• 📄 docs: publish llms.txt from the docs build by @gaborbernat in #3210
• Push renamed changelog to PR branch in upgrade workflow by @gaborbernat in #3213
• 🔧 chore: batch dependency updates weekly on Tuesday by @gaborbernat in #3219
• docs: actualize python support version by @even-even in #3220
• 🐛 fix(create): check every execute bit in ExePathRef.can_run by @darrenhuai in #3217
• 🐛 fix(util): make safe_delete's error handler actually run by @darrenhuai in #3222

New Contributors

• @even-even made their first contribution in #3220

Full Changelog: 21.7.4...21.7.5

What's Changed

• Upgrade embedded pip/setuptools/wheel by @github-actions[bot] in #3208

Full Changelog: 21.7.3...21.7.4

What's Changed

• 🐛 fix(config): return a real list from ListType.split_values by @darrenhuai in #3207

New Contributors

• @darrenhuai made their first contribution in #3207

Full Changelog: 21.7.2...21.7.3

What's Changed

• Upgrade embedded pip/setuptools/wheel by @github-actions[bot] in #3206

Full Changelog: 21.7.1...21.7.2